diff --git a/src/main/java/org/gradlex/conventions/pluginpublish/PluginPublishConventionsPlugin.java b/src/main/java/org/gradlex/conventions/pluginpublish/PluginPublishConventionsPlugin.java
index 15430ae..0e30ff5 100644
--- a/src/main/java/org/gradlex/conventions/pluginpublish/PluginPublishConventionsPlugin.java
+++ b/src/main/java/org/gradlex/conventions/pluginpublish/PluginPublishConventionsPlugin.java
@@ -71,5 +71,9 @@ public void apply(Project project) {
         });
 
         checkstyle.getConfigDirectory().set(project.getLayout().getProjectDirectory().dir("gradle/checkstyle"));
+        project.getDependencies().getConstraints()
+            .add("checkstyle", "com.google.guava:guava:33.4.8-jre", c -> c.because("CVE-2023-2976, CVE-2020-8908"));
+        project.getDependencies().getConstraints()
+            .add("checkstyle", "commons-beanutils:commons-beanutils:1.11.0", c -> c.because("CVE-2025-48734"));
     }
 }